Commits on Oct 12, 2022

1. ccl/cliccl: add debug encryption-decrypt command …

   During storage-level L2 investigations, files from problematic stores
   are often requested (e.g. the MANIFEST file(s), SSTables, etc.). In
   cases where the store is using encryption-at-rest, the debug artifacts
   are useless unless they have been decrypted.
   
   Add a new debug command that can be used to decrypt a file in-situ,
   given the encryption spec for the store, and a path to an encrypted file
   in the store. For example:
   
   ```bash
   $ cockroach debug encryption-decrypt \
     --enterprise-encryption=$encryption_spec \
     /path/to/store \
     /path/to/encrypted/file \
     /path/to/decrypted/output/file
   ```
   
   Touches cockroachdb#89095.
   
   Release note (ops change): A new debug tool was added to allow for
   decrypting files in a store using encryption-at-rest. This tool is
   intended for use while debugging, or for providing debug artifacts to
   Cockroach Labs to aid with support investigations. It is intended to be
   run "in-situ" (i.e. on site), as it prevents having to move sensitive
   key material.

   

   nicktrav committed Oct 12, 2022
   Configuration menu

   • View commit details
   • Copy full SHA for 6e47daa
   • Browse repository at this point

   Copy the full SHA

   6e47daa View commit details

   Browse the repository at this point in the history